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THE  NAVY'S  PLANS  FOR  DESIGN  SAFETY  OF  FUZES 


Prepared  by: 
Allen  M.  Corbin 


ABSTRACT:  An  ad  hoc  group  met  during  1965  to  review  the  Navy's  guide¬ 
lines  for  fuze  safety  which  had  remained  unchanged  since  issue  In  1953* 
This  group  recommended  that  modifications  and  additions  be  adopted. 

Many  of  the  modifications  and  additions  were  based  on  the  similarity  of 
problems  in  obtaining  safety  and  reliability.  Designers  need  safety 
objectives  comparable  to  design  objectives  for  reliability.  The  safety 
hazards  analysis  is  proposed  as  a  method  to  increase  tne  engineering 
value  of  safety  design  objectives.  The  relation  between  redundancy  for 
reliability  and  redundancy  for  safety  is  discussed.  The  safety 
analysis  is  safety's  equivalent  of  reliability's  failure  modes  and 
effects  analysis. 

The  fuze  safety  design  program  which  is  developing  from  the  ad  hoc 
group  recommendations  will  show  marked  similarity  to  present  day 
reliability  programs .  Because  there  is  much  unfinished  work  the  full 
potential  of  this  program  will  not  be  realized  for  about  two  years. 
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THE  NAVY"S  PLANS  FOR  DESIGN  SAFETY  OF  FUZES 


This  report  describes  the  fuze  safety  design  program  being  developed 
as  the  result  of  recommendations  of  an  ad  hoc  group  with 
representation  from  the  Naval  Ordnance  Laboratory,  White  Oak  (NOL(WO)), 
the  Naval  Weapons  Center  Corona  Laboratories,  Corona,  and  the  Naval 
Weapons  Laboratory,  Dahlgren.  The  material  in  this  report  was  first 
presented  as  a  talk  by  the  author.  Work  on  this  program  in  NOL(WO) 
is  being  performed  under  Task  A05  532  063/S470  BO  02. 


E.  F.  SCHREITER 
Captain,  USN 
Commander 


R.  E.  GRANTHAM 
By  direction 


ii 


U 


67-115 


CONTENTS 


INTRODUCTION  . . 

SAFETY  AND  RELIABILITY . 

AD  HOC  GROUP  RECOMMENDATIONS 
STATUS  . 


Page 

1 

1 

5 

8 


ILLUSTRATIONS 

Figure  Title 

1  Some  Things  the  Designer  Must  Khow 

2  Life  Cycle  Hazards 

3  Safety  Hazards  Analysis 

4  Weapon  System  Block  Diagram 

5  Ad  Hoc  Group  Recommendations 

6  Requirements  and  Objectives 

7  Fuze  Safety  Design  Program 

8  Fuze  Safety  Design  Program  for  Fuze  With  In-Line  EED 


REFERENCES 

(a)  BUORD  ltr  Re2b-JJSD:bjn  S78-l(26)  Ser  58079  of  8  Jun  1953  to 
NOL(WO) 

(b)  BUWEPS  ltr  RMM0-211:PC  of  3  Dec  1964  to  NOL(WO),  NOL  Corona, 
and  NWL,  Dahlgren 

(c)  NOL  (WO)  ltr  NO:AMC  :mc  8010  Ser  7855  of  30  Dec  1965  to  BUWEPS  (RMMO) 

(d)  MIL-STD-721A  Definitions  of  Terms  for  Reliability  Bigineering 

(e)  NOLC  Report  666,  Experimental  Methods  for  Determining  the 
Effectiveness  of  Interruption  of  a  Fuze  Explosive  Train 


iii 


67-115 


INTRODUCTION 

1.  In  1953  the  Bureau  of  Ordnance  Issued  a  statement  of  Basic 
Safety  and  Arming  Objectives  for  U.  S.  Navy  Fuzes.  For  many  years 
this  document,  reference  (a),  set  the  standards  for  Navy  fuze  safety. 
Reference  (b)  dated  3  December  1964  requested  that  the  provisions  of 
reference  (a)  be  reviewed  and  reevaluated  in  the  light  of  technical 
advances  and  modem  weapon  trends  to  determine  whether  or  not  these 
criteria  were  adequate  or  needed  to  be  changed.  The  ad  hoc  group, 
established  by  reference  (b)  to  conduct  the  study,  met  seven  times  in 
1965  and  issued  a  summary  report  which  was  forwarded  to  the  Bureau  of 
Naval  Weapons  by  reference  (c).  In  this  report  the  ad  hoc  group 
recommended  a  number  of  additions  and  changes  to  existing  guidance  for 
fuze  safety.  These  recommendations  were  accepted  and  the  work  involved 
in  preparing  material  to  put  these  recommendations  into  effect  is  in 
progress.  In  this  report  a  concise  picture  of  the  program  for  design 
safety  of  fuzes  and  the  reasoning  behind  the  program  approach  are 
given. 


SAFETY  AND  RELIABILITY 

2.  Safety  and  reliability  have  long  been  associated  terms,  but 
there  has  appeared  to  be  a  growing  disparity  in  the  means  employed  to 
obtain  excellence  in  these  two  qualities.  Formal  reliability  programs 
have  been  adopted  as  a  necessary  and  valuable  part  of  weapon  and 
weapon  component  developments.  Various  techniques  and  analyses  have 
been  developed  to  guide  product  designs  toward  high  reliability.  But 
safety  has  appeared  to  be  accepted  as  a  by-product  of  reliability 
programs  rather  than  a  quality  demanding  its  own  improvement 
techniques.  The  guidelines  for  safety  including  rules  of  thumb,  expert 
opinions,  said  stnndard  tests  had  changed  very  little  while  reliability 
guidelines  weru  isrXlng  marked  advances.  In  its  deliberations,  the  ad 
hoc  group  pondered  these  problems.  One  conclusion  reached  was  that  it 
is  possible  to  enhance  safety  through  techniques  very  similar  to  those 
used  for  reliability.  With  continued  thought,  the  retuions  for  this 
have  become  clearer.  They  are  presented  here  because  they  are  vital 
to  the  program  which  is  being  developed  for  design  safety  of  fuzes. 

3.  The  comparison  of  safety  and  reliability  must  start  with  the 
definitions.  One  of  the  contributions  of  the  great  Interest  in 
reliability  of  the  last  decflude  was  agreement  on  definitions  of 
commonly  used  ttrms.  Reference  (d)  defines  terms  for  reliability 
engineer ing.  It  defines  reliability  as: 

The  probability  that  material  will  perform  its 
Intended  function  for  a  specified  period  under 
stated  conditions. 

The  important  aspects  of  this  definition  are  that  reliability  is  a 
number  and  is  therefore  on  a  measurable  scale,  and  the  number  is  valid 
under  stated  conditions  for  a  specified  period.  For  a  weapon  the 


1 


67-115 


Important  conditions  are  those  existing  during  preparation  for  launch, 
launch,  and  flight  to  target.  This  is  when  performance  is  required. 

The  conditions  existing  before  launch,  such  as  in  handling,  transpor¬ 
tation,  and  storage,  cannot  be  ignored.  But  these  are  not  operating 
conditions  and  the  important  thing  is  that  these  conditions  not  destroy 
the  capability  of  working  in  the  launch  conditions.  These  logistic 
conditions  are  like  the  trip  an  athlete  must  take  to  run  a  race  in 
another  city.  The  trip  must  not  exhaust  him  so  much  that  he  can't  run. 
The  medal  he  may  win  is  for  performance  in  the  race. 

4.  In  standardization  of  terms  safety  Is  far  behind  reliability. 

No  single  accepted  definition  of  safety  exists.  It  was  therefore 
necessary  to  define  safety  in  terms  comparable  to  those  used  In 
reliability.  Unsafety,  rather  than  safety,  was  defined  in  order  to  be 
in  agreement  with  the  tendency  to  think  in  terms  of  a  safety  failure 
rate.  The  proposed  definition  of  unsafety  Is: 

The  probability  of  experiencing  the  destructive 
forces  of  one's  own  weapon  resulting  from  any 
conditions  before  Intended  launch  and  safe 
separation. 

There  are  two  important  aspects  of  this  definition.  First,  unsafety 
is  a  number  and  is  therefore  on  a  measurable  scale.  This  point  is 
only  academic.  Measuring  unsafety  may  not  be  practical.  Second, 
there  is  not  any  single  set  of  conditions  in  which  the  number  is  valid. 
There  are  many  sets  of  conditions.  In  fact,  any  conditions  before 
intended  launch  and  safe  separation.  This  means  anything  that  can 
happen  in  handling  transportation,  storage,  and  launch. 

5.  The  ability  to  measure  reliability  has  as  little  to  do  with 
obtaining  it  as  taste  of  a  good  caka  has  to  do  with  mixing  and  baking 
it.  Reliability  is  obtained  by  the  application  of  sound  engineering 
and  management  techniques  and  methods.  Measurement  is  simply  an  index 
of  the  relative  success  or  failure  of  these.  The  inability  to  measure 
unsafety  does  not  preclude  the  application  of  sound  rsngineering  and 
management  techniques  to  obtain  good  safety.  If  anything,  it  stresses 
the  need.  The  problem  was  to  determine  what  these  techniques  should 
be. 


6.  In  order  to  design  for  high  reliability  the  designer  needs  a 
lot  of  Information.  To  illustrate  this  Figure  1  shows  a  small  part  of 
what  he  needs  to  know.  He  needs  to  know  what  the  normal  environments 
will  be.  For  example.  If  in  the  design  of  his  component  he  chose 
materials  which  were  only  good  to  200  degrees  Fahrenheit  and  in  flight 
his  component  failed  because  temperature  actually  reached  400  degrees, 
the  unreliability  would  be  the  result  of  his  lacking  needed  informa¬ 
tion.  If  weapon  launch  Involved  closing  two  switches  in  proper  order 
and  these  switches  were  easily  confused  resulting  In  aborted  missions, 
the  unreliability  would  be  the  result  of  inadequate  attention  to  human 
engineering.  Is  It  logical  to  assume  that  a  designer  needs  less 
information  to  design  properly  for  safety?  It  is  not .  The  designer 
needs  reasonable  estimates  of  the  abnormal  environments  which  may  occur 
in  accidents  or  incidents  in  handling,  transportation,  storage,  ard 
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during  launch.  He  needs  guidance  In  the  careless  or  thoughtless  acts  of 
handling  or  operating  personnel  so  he  can  think  of  ways  to  protect  them 
from  their  own  carelessness.  Other  people  have  thought  that  this  kind 
of  information  was  needed  too.  Jolt,  Jumble,  and  forty  foot  drop 
represent  abnormal  environments  which  every  fuze  designer  respects. 

But  these  do  not  go  far  enough.  They  only  represent  a  few  of  the 
abnormal  things  that  can  happen. 

7.  In  an  attempt  to  increase  information  available  to  the  designer 
regarding  abnormal  environments  and  personnel  actions,  a  procedure 
called  "hazards  analysis"  is  being  developed.  The  "hazards  analysis" 
is  really  nothing  more  than  a  step  by  step,  systematic  procedure  for 
considering  the  maximum  number  of  abnormal  events  which  can  occur  in 
the  phases  of  weapon  life  before  launch  to  safe  separation.  Figure  2 
shows  the  common  phases  of  assembly,  handling,  transportation,  storage, 
and  launch.  Opposite  each  phase  are  listed  some  of  the  more  important 
hazardous  events  which  can  occur  during  the  phase.  During  assembly 
parts  can  be  left  out  or  assembled  wrong.  Probably  an  inspector  is 
supposed  to  catch  these  things,  but  an  ingenious  designer  might  devise 
ways  that  the  device  would  not  go  together  if  critical  parts  were 
omitted.  Rough  handling  and  drops  are  rather  common  in  ammunition 
handling.  Jolt,  Jumble,  and  forty  foot  drop  tests  insure  that  fuzes 
are  built  to  take  a  lot  of  rough  handling.  But  these  alone  don't  cover 
all  possibilities.  A  particular  weapon  may  have  special  handling  gear 
which  may  produce  special  situations  if  it  fails.  In  transportation 
there  is  always  the  chance  of  collision,  overturning,  and  fire.  And, 
as  shown,  in  Figure  2,  unusual  things  can  happen  during  storage  and 
launch  as  well. 

8.  The  purpose  of  the  hazards  analysis  is  to  express  these  life 
cycle  hazards  in  terms  which  the  designer  can  use.  Shock,  for  example, 
would  be  expressed  in  terms  of  a  velocity  change,  or  the  probable 
ranges  of  gravity  units  and  time.  The  magnitudes  would  be  those 
estimated  to  be  possible  or  probable  in  the  accidents  being  considered. 
Then  the  designer's  problem  is  to  arrive  at  a  design  solution  which 
assures  weapon  safety  in  the  environment.  Figure  3  illustrates  this. 

The  rectangles  on  the  left  represent  the  accident  environments  or 
personnel  actions.  The  circles  on  the  right  represent  design  solutions. 
In  other  words,  the  circles  are  safety  devices  which,  in  theory,  will 
give  protection.  One  device  is  likely  to  be  adequate  protection  for  a 
good  many  of  the  accident  events  listed.  But  it  is  not  likely  to  have 
the  proper  characteristics  to  give  protection  in  all  accidents.  So 
when  an  environment  or  action  appears  for  which  the  first  device  is 

not  suitable,  a  second  device  is  added  to  the  system.  This  process  is 
continued  until  the  design  solution  oan  protect  against  all  the 
accident  events.  Seme  of  the  devices  added  will  provide  additional 

?  rot action  In  events  already  covered  by  other  devices.  This  double  or 
ripls  protection  is  illustrated  by  the  dashed  lines. 

9.  If  this  process  is  dons  thoroughly  it  produces  a  list  of 
environments  applicable  to  safety.  It  gives  the  designer  the  safety 
equivalent  of  the  normal  environments  which  he  needs  in  order  to 
design  for  reliability.  The  nature  of  the  data  will  be  quite  different. 
The  safety  environments  will  not  be  predicted  as  accurately  beoause 
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accidents  are  lees  predictable  than  normal  events.  At  best,  the  levels 
of  environments  will  be  rough  estimates.  But  for  safety  design,  often 
this  Is  all  that  Is  needed.  For  exaaple,  the  designer  may  find  an 
acceptable  solution  regardless  of  whether  the  peak  accident  shock  Is 
1000 g  or  10,000g.  The  process  also  lists  dangerous  personnel  actlonr. 
The  solutions  for  these  may  be  through  design.  This  Is  human 
engineering  for  safety.  Or  the  solutions  may  be  precautions  and 
restrictions,  which  takes  them  out  of  the  designers  hands.  What  Is 
best  depends  on  the  weapon  and  the  circumstances  In  which  It  will  be 
used. 


10.  If  the  design  solution  for  safety  coming  out  of  the  hazards 
analysis  calls  for  more  than  one  safety  component,  this  Is  redundancy 
for  safety.  This  Is  another  area  where  the  techniques  for  reliability 
and  safety  are  so  similar.  Figure  4  shows  a  block  diagram  or 
reliability  model  of  a  weapon.  When  called  upon  to  operate,  components 
a,  b,  c,  either  d,  e,  1,  and  2  must  function.  Redundancy  Is  employed 
In  component  d.  The  purpose  of  this  redundancy  Is  to  Increase  the 
probability  of  operation.  So  It  is  assumed  that  component  d  was 
considered  to  be  a  weak  link.  Its  failure  rate  was  too  high  and  to 
compensate  for  this  another  component  was  put  In  parallel  with  It.  If 
the  high  failure  rate  of  d  was  the  direct  result  of  one  of  the  normal 
environments.  It  would  do  little  good  to  put  another  Identical  component 
In  parallel  with  It.  The  second  component  would  be  caused  to  fall  by 
the  same  environment.  However,  It  Is  unlikely  that  a  component  which 
could  not  survive  one  of  the  normal  environments  would  get  Into  the 
system.  So  redundancy  for  reliability  Is  usually  used  to  compensate 
for  random  unpredictable  failures.  In  other  words,  a  certain  number  of 
component  d's  are  "lemons".  By  placing  a  second  coeponent  d  in  parallel 
with  the  first,  operation  will  stop  at  this  component  only  if  both 
components  happen  to  be  "lemons". 

11.  In  Figure  4,  components  1  and  2  are  safety  components.  The 
fact  that  two  are  shown  Is  redundancy  for  safety.  Note  that  safety 
redundancy  Is  series  whereas  reliability  redundancy  is  parallel.  The 
reason  for  this  Is  quite  simple.  In  reliability  the  purpose  of 
redundancy  is  to  enhance  operation.  So  an  alternate  operating  path  is 
provided.  In  safety  the  purpose  of  redundancy  Is  to  decrease  the 
chance  of  premature  operation.  This  is  done  by  adding  another  series 
barrier. 

12.  The  redundant  safety  components  are  usually  different.  There 
Is  good  reason  for  this  too.  It  was  mentioned  above  that  redundancy  for 
reliability  Is  usually  to  compensate  for  "lemons"  and  not  for  normal 
environment  caused  failures.  "Lemons"  may  occur  In  safety  components  too 
but  this  Is  not  as  big  a  problem  as  failures  caused  by  the  accident 
environments.  Therefore  the  same  reasoning  applies.  As  long  as  the 
failures  are  environment  induced.  Identical  redundancy  Is  not  the 
correct  solution.  The  same  environment  would  defeat  both  of  two 
Identical  devices.  The  solution  Is  dissimilar  redundancy  in  which  the 
different  safety  cooponents  are  selected  so  that  no  one  environment 

will  defeat  all  devices.  This  is  the  common  solution  for  safety 
because  accident  environments  are  numerous  and  can  be  very  severe. 
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13.  The  brief  discussion  of  similarities  in  designing  for  safety 
and  reliability  was  presented  because  this  is  really  the  backbone  of 
the  design  safety  program  recommended  by  the  ad  hoc  group.  The 
remainder  of  this  report  will  be  devoted  to  discussion  of  the  recom¬ 
mendations  and  the  status  of  supporting  material  which  is  to  be 
prepared . 


AD  HOC  GROUP  RECOMMENDATIONS 

14.  Figure  5  shows  seven  areas  which  were  the  subject  of  recom¬ 
mendations  of  the  group.  These  seven  will  be  mentioned  briefly  and 
then  each  will  be  discussed  In  more  detail.  First,  the  group  felt  that 
there  were  requirements  and  objectives  applicable  to  all  fuses.  These 
are  much  like  the  Basic  Safety  and  Arming  Design  Objectives  for  U.S. 

Navy  Fuses  issued  in  1953.  It  was  intended  that  these  would  be  stated 
as  part  of  the  safety  policy  for  fuzes.  The  second  recommendation 
dealt  with  explosives  sensitivity.  The  Navy  has  long  used  a  rule  that 
no  explosive  more  sensitive  than  tetryl  should  be  used  beyond  the 
explosive  train  interrupter.  This  rule  is  becoming  more  and  more  of  a 
problem  because  many  new  explosives  are  being  developed  and  it  is 
difficult  to  say  what  is  or  isn’t  more  sensitive  than  tetryl.  A  series 
of  eight  sensitivity  tests  to  determine  acceptable  explosives 
sensitivity  was  recommended.  The  third  recommendation  is  to  use  a 
more  complete  test  procedure  in  determining  detonator  safety.  The 
fourth  recommendation  anticipates  the  possible  use  of  exploding  bridge 
wire  devices  in  fuzes.  These  fuzes  probably  would  not  have  Interrupted 
explosive  trains.  In  such  cases  there  is  need  for  more  electrical 
switching  safety  than  has  been  used  in  existing  electric  fuzes.  The 
safety  hazards  analysis  is  the  fifth  recommendation  and  it  was  discussed 
in  some  detail  earlier.  Its  purpose  is  to  develop  safety  design 
objectives  stated  in  terms  which  the  designer  can  understand  and  use. 

The  sixth  recommendation  was  that  hardware  be  studied  in  a  safety 
analysis.  This  is  really  safety's  equivalent  of  reliability's  Failure 
Modes  and  Effects  Analysis.  The  seventh  recommendation  was  to  write  a 
report  discussing  weapon  safety  concepts.  It  is  hoped  that  this  can 
serve  as  a  text  book  on  design  safety. 

15.  Figure  6  lists  the  requirements  and  objectives  applicable  to 
all  fuzes.  These  include  statements  on  explosive  train  interruption, 
explosives  sensitivity,  in-line  explosive  trains,  safe  arm  indie  at  i  m, 
a  safety  failure  rate,  stored  energy  for  arming,  a  minimum  of  two 
series  arming  mechanisms,  and  use  of  a  post-launch  environment. 

Explosive  train  interruption  is  required  when  the  fuze  contains 
sensitive  explosives.  Sensitive  explosives  are  those  which  are  too 
sensitive  In  any  one  of  the  eight  criteria  tests.  The  effectiveness 
of  interruption  is  to  be  determined  by  the  methods  described  In  the 
report  which  was  the  third  recommendation  of  the  group.  In-line 
explosive  trains  are  not  prohibited  but.  If  used,  must  enploy 
explosives  of  acceptable  sensitivity.  This  probably  means  exploding 
bridge  wire  initiation,  and  a  report  will  be  prepared  describing 
special  switching  precautions  to  control  the  electric  energy  of  the 
firing  unit.  Safe-arm  indication  is  a  requirement  for  fuzes  which  can 
be  armed  by  personnel  during  handling  of  the  fuze  or  fuzed  weapon. 
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Objectives  were  set  apart  from  requirements  because  it  was  recognized 
that  in  some  cases  it  would  not  be  feasible  to  comply  with  the 
objectives. 

16.  Acceptable  explosives  sensitivity  is  tc  be  determined  by  eight 
sensitivity  tests.  The  eight  tests  are: 

(1)  Small  Scale  Gap  Test 

(2)  Impact  Sensitivity  Test 

(3)  Impact  Vulnerability  (Flying  Plate  Test) 

(4)  Vacuum  Stability  Test 

(5)  Hot  Wire  Ignition  Test 

(6)  Bonfire  Test 

(7)  Electrostatic  Sensitivity  Test 

(8)  Friction  Sensitivity  Test 

A  Weapons  Requirement  (WR)  will  be  issued  with  a  title  reading 
something  like  this: 

"Sensitivity  Criteria  for  the  Qualification  and 
Control  of  Booster  and  Lead  Explosives". 

The  procedure  for  running  each  test  and  the  equipment  to  be  used  will 
be  specified.  Each  test  will  have  a  pass-fail  criteria.  The 
sensitivity  of  the  explosive  will  be  acceptable  only  if  it  satisfies 
the  criteria  of  all  eight  tests.  When  this  WR  is  issued  it  will  allow 
an  explosive  to  be  judged  on  its  own  merits  rather  than  requiring 
comparison  to  tetryl. 

17.  The  effectiveness  of  explosive  train  interruption  will  be 
determined  by  mors  thorough  methods  than  are  now  required  by  the 
Static  Detonator  Safety  Test,  (MIL-STD-331,  Test  115).  The  method 
will  determine  how  much  design  margin  exists  in  the  barriers  which 
prevent  accidental  Initiation  from  fixed  detonator  to  slider  (or  rotor) 
detonator  to  lead,  fixed  detonator  to  lead,  fixed  detonator  to  booster, 
and  fixed  detonator  to  main  charge.  The  report  of  these  methods  is 
the  only  one  of  the  supporting  documents  which  has  been  completed.  It 
is  reference  (e). 

18.  The  safety  program  recommended  will  not  exclude  in-line  electro 
explosive  devices  (EED’sJ.  It  will  however,  insure  that  such  devices 

do  not  exceed  the  explosive  sensitivity  limits  and  that  there  is  safety 
in  the  control  of  the  electrical  energy  which  compensates  for  the  lack 
of  explosive  train  interruption. 

19.  The  hazards  analysis  was  discussed  in  paragraphs  7,  8.  and  9. 
Its  purpose  Is  to  Increase  completeness  of  safety  design  objectives. 
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One  problem  not  mentioned  previously.  Is  that  accident  environments 
occur  only  occasionally.  Some  types  of  accidents  occur  more  frequently 
than  others.  The  more  frequent  accidents  deserve  more  safety  design 
consideration  than  infrequent  ones.  The  Air  Force  uses  tne  term 
"credible  accident  environments".  No  line  has  yet  been  drawn  between 
"credible"  and  "incredible".  It  is  still  a  matter  of  Judgment.  The 
hazards  analysis  should  list  credible  accident  environments  with 
Judgments  of  credibility  made  far  enough  in  advance  so  that  the 
designer  has  firm  goals. 

*■ 

20.  Procedures  for  conducting  a  safety  analysis  were  published  in 
1955  in  NAVORD  Report  4135 >  entitled  Relative  Accident  Probability 
(RAP)  Analysis.  It  was  recommended  that  this  report  be  revised  to 
make  it  more  useful  and  also  more  available,  since  it  is  out  of  print. 
The  Air  Force  developed  a  safety  analysis  quite  similar  to  the  RAP 
Analysis  in  basic  approach.  It  is  called  Fault  Tree  Analysis.  Either 
one  of  these  analyses  is  the  safety  equivalent  of  reliability's 
Failure  Modes  and  Effects  Analysis  (FMEA).  The  following  distinction 
is  made  between  a  safety  analysis  and  a  hazards  analysis.  A  safety 
analysis  is  a  study  of  actual  hardware  in  accident  situations.  It  is 
therefore  a  part  of  safety  evaluation.  A  hazards  analysis  is  a  study 
of  environments  or  personnel  actions  in  accident  situations.  It  is 
conducted  to  establish  important  design  objectives.  Actually  the 
hazards  analysis  can  evolve  into  a  RAP  Analysis  as  the  hardware 
develops.  The  group  recommended  use  of  a  safety  analysis  as  a  useful 
tool  for  safety  evaluation. 

21.  The  report  on  Weapon  Safety  Concepts  is  intended  to  serve  as 
background  for  design  safety  engineering.  One  problem  in  safety 
design  is  that  personal  experience  plays  such  an  important  part. 
Personal  experience  is  extremely  valuable.  But  a  good  safe  design  is 
based  on  the  experiences  of  many  rather  than  a  few  individuals. 
Therefore  the  purpose  of  this  report  is  to  present  ideas  to  increase 
the  objectivity  of  designers. 

22.  Figure  7  gives  a  concise  picture  of  the  fuze  safety  design 
program.  The  rectangles  enclosing  small  circles  are  documents  being 
prepared  to  implement  the  program.  The  report  on  Weapon  Safety 
Concepts  combined  with  the  designer's  experience  and  ability  will  give 
design  competency.  Complete  safety  objectives  will  be  obtained  from 
policy  requirements  and  objectives,  explosives  sensitivity  criteria, 
and  the  safety  hazards  analysis.  Proof  of  a  safe  design  will  be 
obtained  from  explosive  train  interruption  tests,  the  safety  analysis, 
and  other  safety  tests.  The  nature  of  these  latter  tests  will  be 
strongly  influenced  by  the  findings  of  the  hazards  analysis  and  the 
safety  analysis. 

23.  A  slightly  different  program  will  apply  for  a  fuze  without 
explosive  train  interruption  and  with  an  in-line  electroexplosive 
device  (EED) .  In  this  case  the  report  on  design  guides  and  test 
procedures  for  in-line  EED's  will  contribute  to  design  objectives  and 
test  procedures  and  the  report  on  testing  explosive  train  interruption 
will  not  apply.  This  program  is  shown  In  Figure  8. 
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STATUS 

24.  As  this  report  Is  being  written,  two  of  the  seven  documents 
needed  to  implement  this  program  are  complete.  One  of  these,  the 
statement  of  policy  including  requirements  and  objectives  applicable 
to  all  fuzes,  is  an  interim  publication  and  will  require  revision  when 
the  supporting  documents  are  complete.  It  is  MIL-STD-1316  (Navy) 
entitled  Fuzes,  Navy,  Design  Safety  Criteria  For.  The  second  published 
document  is  NOLC  Report  660,  Experimental  Methods  for  Determining  the 
Effectiveness  of  Interruption  of  a  Fuze  Explosive  Train.  Two  reports 
are  nearing  completion.  These  are  the  report  on  weapon  safety  concepts 
and  sensitivity  criteria  for  lead  and  booster  explosives.  Both  should 
be  complete  and  in  final  review  by  the  end  of  calendar  year  1967.  The 
present  goal  for  completing  the  reports  on  safety  hazards  analysis  and 
design  guides  and  test  procedures  for  in-line  EED's  and  for  revising 
the  report  on  safety  analysis  is  July  1968.  When  all  documents  are 
complete  MIL-STD  *1316  will  have  to  be  revised  to  include  them  as 
requirements.  Consequently  it  is  likely  that  the  full  potential  of 
this  program  will  not  be  realized  for  about  two  years. 
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FOR  A  RELIABLE  DESIGN: 


1.  The  expected  environments 
of  handling,  transportation, 
storage,  and  launch  and  flight 
to  target. 


2.  The  careless  or  thoughtless 
acts  of  personnel  which  can 
result  in  mission  failure  and 
which  can  be  avoided  by  design. 


FOR  A  SAFE  DESIGN: 


1.  The  abnormal  environments 
of  accidents  or  incidents  in 
handling,  transportation, 
storage,  and  launch  to 

safe  separation. 

2.  The  careless  or  thoughtless 
acts  of  personnel  which  can 
result  in  unsafety  and  which 
can  be  made  less  hazardous 

by  design. 


FIG.  1  SOME  THINGS  THE  DESIGNER  MUST  KNOW 
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PHASE 

Assembly 

Handling 

Transportation 

Storage 

Launch 


HAZARDOUS  EVENTS 
Personnel  errors  and  carelessness. 

Drops,  rough  handling,  crushing. 

Collisions,  overturning,  fire. 

High  and  low  temperatures,  extremes 

of  humidity  and  pressure,  effects  of 
disasters  such  as  fire  and  storm. 

Abnormal  launch  environments,  personnel 
errors,  premature  removal  of  safety 
features. 


FIG.  2  LIFE  CYCLE  HAZARDS 
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REDUNDANCY  FOR^  REDUNDANCY  FOR" 
RELIABILITY  SAFETY 


FIG.  4  WEAPON  SYSTEM  BLOCK  DIAGRAM 
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1.  Issue  a  Fuze  Safety  Policy  which  will  include 
requirements  and  objectives  applicable 

to  all  fuzes. 

2.  Prepare  tests  and  criteria  to  determine 
acceptability  of  an  explosive  for  in-line  use. 

3.  Describe  test  procedures  for  evaluating 
effectiveness  of  explosive  train  interruption. 

4.  Prepare  design  guides  and  describe  test 
procedures  to  give  adequate  control  of  use 
of  in-line  EED’s.  (EBW  devices). 

5.  Describe  procedures  for  conducting  a  safety 
hazards  analysis  to  obtain  weapon  dependent 
safety  objectives. 

6.  Revise  procedures  for  conducting  a 

safety  analysis  of  a  completed  design  (based 
on  RAP  Analysis  or  Fault  Tree  Analysis). 

7.  Write  a  report  discussing  general  weapon 
safety  concepts  to  provide  background 
for  safety  design. 


FIG.  5  AO  HOC  GROUP  RECOMMENDATIONS 
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The  fuze  safety  policy  will  include  the  following 

requirements  and  objectives  applicable  to  all  fuzes. 

REQUIREMENTS: 

1.  Explosive  train  interruption  where  fuze  employs 
sensitive  explosives. 

2.  Sensitivity  limit  for  lead  and  booster  (in-line] 
explosives  set  by  eight  sensitivity  tests. 

3.  Special  switching  provisions  for  in-line  EED’s 
(EBW  devices.] 

4.  Safe-arm  indication  for  fuzes  which  could  be  armed 
during  handling. 


OBJECTIVES: 

1.  A  safety  failure  rate  of  less  than  one  in  one 
million. 

2.  Store  no  energy  for  arming;  obtain  energy  from  a 
launch  environment. 

3.  Use  at  least  two  independent  series  arming 
mechanisms. 

4.  Use  a  post-launch  environment  to  arm. 


FIG.  6  REQUIREMENTS  AND  OBJECTIVES 


UNCLASSIFIED 


Security  Classification 


DOCUMENT  CONTROL  DATA  •  RAO 

fS#cur<<y  c  laami  hcatiun  o$  title.  body  ot  abstract  anti  inde  amg  anr  ifafron  muni  he  entered I  when  (he  overall  report  ia  <  las  silted) 


t  ORIGINATING  ACT|\/|TV  (Corporate  author) 


U.  S.  Naval  Ordnance  Laboratory- 
White  Oak,  Silver  Spring,  Maryland 


2  a  RL'PORT  SECURITY  C  I.ASSIFICATION 

UNCLASSIFIED _ 

2  h  GROUP 


3  REPORT  TITLE 


THE  NAVY'S  PLANS  FOR  DESIGN  SAFETY  OF  FUZES 


4  DESCRIPTIVE  NOTES  (Type  ol  report  and  indue ive  dates) 


5  AUTHORfS>  (Last  name.  Ural  name.  Initial) 


Corbin,  Allen  M. 


6  REPO  RT  DA  TE 

10  July  1967 


la  CONTRACT  OR  GRANT  NO, 


,0J'CT"o  A05  532  063/S470  BO  02 


7b  TOTAL  NO  of  PAGES 

8 


7  6  NO  OF  REFS 

5 


9a  ORIGINATOR'S  REPORT  NUMBER(S) 


96  OTHER  REPORT  NOfS)  (Anvother  numbers  that  may  be  as  si  fined 
this  report) 


NOLTR  67-115 


tO  AVA  IL  ABILITY/LIMITATION  NOTICES 


This  document  is  subject  to  special  export  controls  and  each 
transmittal  to  foreign  governments  may  be  made  only  with  prior 
approval  of  NOL. 


11  SUPPLEMENTARY  NOTES 


12  SPONSORING  MILITARY  ACTIVITY 


1  abstract  An  ad  hoc  group  met  during  1965  to  review  the  Navy's 
guidelines  for  fuze  safety  which  had  remained  unchanged  since  issue  in 
1953.  This  group  recommended  that  modifications  and  additions  be 
adopted.  Many  of  the  modifications  and  additions  were  based  on  the 
similarity  of  problems  in  obtaining  safety  and  reliability.  Designers 
need  safety  objectives  comparable  to  design  objectives  for  reliability 
The  safety  hazards  analysis  Is  proposed  as  a  method  to  increase  the 
engineering  value  of  safety  design  objectives.  The  relation  between 
redundancy  for  reliability  and  redundancy  for  safety  Is  discussed. 

The  safety  analysis  is  safety's  equivalent  of  reliability' s  failure 
modes  and  effects  analysis. 

The  fuze  safety  design  program  which  Is  developing  from  the  ad  hoc 
group  recommendations  will  show  narked  similarity  to  present  day 
reliability  programs.  Because  there  Is  much  unfinished  work  the  full 
Ipotential  of  this  program  will  not  be  realized  for  about  two  years. 


DD  1473 


Security  Cla  ;sification 


UNCLASSIFIED 

Security  Classification 


1  4  1 

KEY  WORDS 

|  LINK  A 

|  LINK  B  | 

|  LINK  C 

ROLE 

WT 

ROLE 

w  r 

ROLE 

WT 

Safety 

1 

Design  Safety 

Fuze  Safety 

INSTRUCTIONS 


\.  ORIGINATING  ACTIVITV:  Enter  the  name  and  address 
of  the  contractor,  subcontractor,  grantee.  Department  of  De¬ 
fense  activity  or  other  organization  (corporate  author)  issuing 
the  report. 

2a.  REPORT  SECUHTY  CLASSIFICATION:  Enter  the  over¬ 
all  security  classification  of  the  report.  Indicate  whether 
“Restricted  Data"  is  included.  Marking  is  to  be  in  accord¬ 
ance  with  appropriate  security  regulations. 

26.  GROUP:  Automatic  downgrading  is  specified  in  DoD  Di¬ 
rective  5200.  10  and  Armed  Force;  Industrial  Manual.  Enter 
the  group  number.  Also,  when  applicable,  show  that  optional 
markings  have  been  used  for  Group  *i  and  Group  4  as  author¬ 
ized. 

3.  REPORT  TITLE:  Enter  the  complete  report  title  in  all 
capital  letters.  Titles  in  all  cases  should  be  unclassified. 

If  a  meaningful  title  cannot  be  selected  without  .  iassifica- 
tion,  show  title  classification  in  all  capitals  in  parenthesis 
immediately  following  the  title. 

4.  DESCRIPTIVE  NOTES:  If  appropriate,  enter  the  type  of 
report,  e. g. ,  interim,  progress,  summary,  annual,  or  final. 

Give  the  inclusive  dates  when  a  specific  reporting  oeriod  is 
covered. 

5.  AUTHOR(S):  Enter  the  name's)  of  author(s)  as  shown  on 
or  in  the  report.  Entei  last  name,  first  name,  middle  initial. 

If  military,  show  rank  and  branch  of  service.  The  name  of 
the  principal  author  is  an  absolute  minimum  requirement. 

6.  REPORT  D*ATE:  Enter  the  date  of  the  report  as  day, 
month,  year,  or  month,  year.  If  more  than  one  date  appears 
on  the  report,  use  date  of  publication. 

7a.  TOTAL  NUMBER  OF  PAGES:  The  total  page  count 
should  follow  normal  pagination  procedures,  i.e.,  enter  the 
number  of  pages  containing  information. 

7b.  NUMBER  OF  REFERENCES:  Enter  the  total  number  of 
references  cited  in  the  report. 

8a.  CONTRACT  OR  GRANT  NUMBER:  If  appropriate,  enter 
the  applicable  number  of  the  contract  or  grant  under  which 
the  report  was  written. 

86,  8c,  fit  8d.  PROJECT  NUMBER:  Enter  the  appropriate 
military  department  identification,  such  as  project  number, 
subproject  number,  system  numbers,  task  number,  etc. 

9a  ORIGINATOR’S  REPORT  NUMBER(S):  Enter  the  offi¬ 
cial  report  number  by  which  the  document  will  be  identified 
and  controlled  by  the  originating  activity.  This  number  must 
be  unique  to  th:r  report* 

96.  OTHER  REPORT  NUMBER(S):  If  the  report  has  been 
assigned  any  other  report  numbers  (either  by  the  originator 
or  by  the  sponsor),  also  enter  this  number(s). 

10.  AVAILABILITY/LIMITATION  NOTICES:  Enter  any  lim¬ 
itations  on  further  dissemination  of  the  report,  other  than  those 


imposed  by  security  classification,  using  stardard  statements 
such  as: 

(1)  “Qualified  requesters  may  obtain  copies  of  this 
report  from  DDC.” 

(2)  "F'neign  announcement  and  d'ssemination  of  this 
report  by  DDC  is  not  authorized." 

(3)  “U.  S.  Government  agencies  may  obtain  copies  of 
this  report  directly  from  DDC.  Other  qualified  DDC 
users  shall  request  through 


“U.  S.  military  agencies  may  obtain  copies  of  this 
report  directly  from  DDC.  Other  qualified  users 
shall  request  through 


(5)  “All  distribution  of  this  report  is  controlled.  Qual¬ 
ified  DDC  users  shall  request  through 


If  the  report  has  been  furnished  to  the  Office  of  Technical 
Services.  Department  of  Commerce,  for  sale  to  the  public,  indi¬ 
cate  this  fact  and  enter  the  price,  if  known. 

11.  SUPPLEMENTARY  NOTES:  Use  for  additional  explana¬ 
tory  notes. 

12.  SPONSORING  MILITARY  ACTIVITY:  Enter  the  name  of 
the  departmental  project  office  or  laboratory  sponsoring  (pay¬ 
ing  for)  the  research  and  development.  Include  address. 

13  ABSTRACT:  Enter  an  abstract  giving  a  brief  and  factual 
summary  of  the  document  indicative  of  the  report,  even  though 
it  may  also  appear  elsewhere  in  the  body  of  the  technical  re¬ 
port.  If  additional  space  is  required,  a  continuation  sheet  shall 
be  attached. 

It  is  highly  desirable  that  the  abstract  of  classified  reports 
be  unclassified.  Each  paragraph  of  the  abstract  shall  end  with 
an  indication  of  the  military  security  classification  of  the  in¬ 
formation  in  the  paragraph,  represented  as  (TS),  (S).  (C).  or  (U). 

There  is  no  limitation  on  the  length  of  the  abstract-  How¬ 
ever,  the  suggested  length  is  from  150  to  225  words. 

14.  KEY  WORDS:  Key  words  are  technically  meaningful  terms 
or  short  phrases  that  characterize  a  report  and  may  be  used  as 
index  entries  for  cataloging  the  report.  Key  words  must  be 
selected  so  that  no  security  classification  is  required.  Identi¬ 
fiers,  such  as  equipment  model  designation,  trade  name,  military 
project  code  name,  geographic  location,  may  be  used  as  key 
words  but  will  be  followed  by  an  indication  of  technical  con¬ 
text.  The  assignment  of  links,  roles,  and  heights  is  optional. 


gpo  931-718  _ UNC IAS S IE'  1ED _ 

Security  Classification 


CO 

p 

•H 

•H 

rH  • 

1  1  H 

d  T1 

1 

^0  d  0 

cd  © 

top  cocd©-Hd© 

0  *H 

to 

©  ©  ©*rHrHp  ©  >r_J 

<M 

fsj  p  N  H  ^  (h  H  O 

P  -H 

N 

p  Cd  p  ©  »H  O  1  1  d 

O  © 

P 

co  (i3  E-»  0  «j  Cl 

cd  © 

£ 

d  cd 

• 

P  rH 

4  h* 

«  O 

•  «  •  H  H 

p  d 

• 

rH  ru  M  H  h1 

<  3 

rH 

)  CLm 
a)  & 
*  o 


fc 

co 

CO 

i 


•  to 

*  6  © 

w  3  d 

©  ©  dp 

^  N  n  "oOt}  ^ 

p  P  p  O  ©  G 

^  V  d  O  *H 

fc  ^  ftO  4J 

5)  tM  O  d  C 

•H  O  P  >-,  CL  © 

^  ^  -P  g 

D  >,^-HH  3 

d  P  P  «5  O 

©  *X3  »rt  •■ «  O 

o  tM  4)  o  TJ 

P  «}  O  eJ  © 

w  C  -H  p,  G 
in  ©  P 

<£>  G  R  0) 

CTi  ^  B  ^ 

rH  .H  O 
«  O  G 

G  <D  <D  d  * 


CO  P 


P  P 
-P  d 

0)  o 
8  '*-* 
On  TO 

P  © 


CO  CO 
5)  TO 
d  4) 
d 


4)  ^  VU) 

P  O1  o 
to  o  a)  d 
g  B  d  pH 

a  R  ©  • 

S3  M  P 
O  d  H  a) 

^  ^  p 

■  ‘  ■  d 


d»H  'em 

'aO-P  Ol^  «  _ 
O  d  td  CL  cd  CL 
O  «D  CLP  -H  © 
O  ”~i  P  d  d 
^-o-d  £  P  a) 

o  4)^  0)  +5  n 

*TJ  «  W  «H  t)  -rl 
<d  co  P  flj  d 

-  r  1)  W  O  ® 
R  >~>  ©  p  to 

<|  >  LP  8)  p  fl) 

d  3^3  CL! 

iZ  *4  a1  Eh  d  p 


to 

•H 

•H 

rH  * 

» 

d  T3 

Xi  c.  0 

a  © 

TO 

p  w  cd  ©  *h  d  © 

O  *H 

© 

©  ©  mH  rH  P  ©  *0 

«P 

N 

«M  N  rH  p  d  rH  O 

P  .H 

l 

Cd  p  ©  .H  O  rH  d 

to  CC  EH  0  <|  (X 

O  « 
ed  to 

d  cd 

• 

P  rH 

*  M 

«  O 

• 

•  •  W  H 

CO  H  H  H 

P  d 

1 — 1 

«n  3 

*  TO 

B 


£ 


'  3) 

P*H  *\ 
O  CLm 


M 

H 

r«. 

H 

(O 

to 


6  03 

to  S  L 

©  ©  d  P 

&  N  w  'oO'P  ti£> 
P  P  P  O  ©  G 

<H  d  O  P 

fe  ^  ftO-P 
©<h  o  d  R 


rs 

CO  'O 

4 

•H  O  *H  >,  a  0) 

M 

0 

O 

p  P  p  g 

cd  pn 

O  M 

•  C\J 

©  >,  ^  -H  rH  3 

d  P  H  (C  O 

©  <3 

no 

0  in 

©  03  *H  -H  O 
O  <H  ©  P  O  ^-1 

p  CO 

o 

p  cd  ^3  «d  © 

*h  in 

rH  in 

«  d  *h  P,  d 

in 

G  I 
o>  w)  ] 

H<H  L  _ 
to  o  G  d 
G  ©  ©  d  P 

•HP  L  ®  P  — 
T?  C  O 
+>  L  n  O  (D  L 
a>  o  d  g  d  CL 
6«m  * 


d  R  © 
CL  to  a  a 

w  o 


-  A  ad 
—  L  n  a) 

d  P  V-X0  p 


d  P  >00 
'oil  P  Odd  • 
O  d  d  CL  d 

O  03  CL  rH  P 
0*0  P  >-,  d 
L^Tl  R  -P  4) 
O  4)^  ®  +J 
P  CO  to  «h  -H 

d  w  p  cd  d 
-  >  ©  *0  O 

G  >>  ©  p 
=d  >  d  P  ©03 
d  ^  2 
55  <!  crtH  d 


I 


-2  p 

d  o 

p  CO  «J  ©  P  d  © 
©  H'-HH,0  ©  •'"J 
<P  N  rH  P  d  rH  O 
d  P  ©  P  O  P  d 
to  CK  Eh  o  *»5  cl 


B 

M 


4>  *H 
0  to 
cd  to 
d  cd 
P  rH 

m  o 


r\ 

to 

0 

f.l 

w 

TO  8  L 

u 

©  ©  d  P 

e'  ^ 

%  3, 

r» 

P  N  TO  'OOP  ViO 

• 

p 

p  p  p  0  ©  d 

•n 

to 

Lh  C  OH 

S 

d  *N 

to 

k  j3  a,  0  4> 

'  '  CL^ 

H 

©  «4H  0  d  d 

• 

tl)  ^ 

•H  OP  >,  CL  © 

Jd 

>•  P 

O 

p*  p  p  g 

»>  >,>  hh  3 

•  fVj 

b 

d  p  p  cd  0 

r-.r-  to 
•4^  in 

©  P  p  p  0 

© 

od  ©POP 

•ai  O 

p  cd  p  cd  © 

^  LTi 

r-*  IT 

to  d  p  0.  d 

<*<  ^ 

in  ©  p  to  p 

**H 

r5  >,<< 

•OCR© 

1 

I  H  rH 

0  ’no  g  d  n  to 

to  p 

P  .rl  0  ©  W 

to  0  d  d  © 

d 

O  « 

d  ©  ©  d  p  d 

0 

d»  L1 

P  P  d  ©  P 

♦>  d 

td  rH 

p  o'  0 

«  r 

n  C3 

P  d  to  0  ©  d 

d  d  .fc  to 

©  0  td  p  d  Cl 

C  I 

•  0 

a  ch  k 

p  r 

(O  B  7. 

cd  R  ©  • 

PL  TO  R  a  P  P 

•-J  r  H 

.1-E  . 

p  ©  a  0  d  © 

O  P-  d  P  ttO  p 

Vlt  11.  Q  M 

d  «H  'Ofl  O  d 

O  ft 

CJ  ® 

'OOP  O  d  d  •  O 

5 

CO  rH 

O  d  <d  CL  <d  CL 

cd  h'3 

-  •  P 

O  ©  CLP  P  © 

O  *o  P  >>  d  d 

P  P  p  R  P  © 

d  p 

. 

O  ©  P  ©  p  (0 

C  _ 

P  TO  TO  <H  «H  P 

-1 

r-4  «0  • 

cd  to  p  cd  d 

-  ►>  ©  TO  0  © 

G  >■>  ©  P  « 

r-  Cj  «1H4>N 

4 

>.P  O 

cd  P  p  G  p 

5r 

p  0  m 

5S  <j  ct’Eh  cd  p 

TO 

p 

P 

•H 

rH  • 

I 

1  *H  *s2  P 

d  P 

p  d 

0 

a  © 

to  p 

to  td  ©  .h  d 

© 

0  p 

©  © 

©  -H  P  p  © 

•r^ 

®M 

N  *-t 

n  p  p  d  p 

O 

P  P 

P  cd 

©  -rl  OP 

& 

O  « 

{d  CO 

a  to 

. 

d  a 
p  p 

« 

h"1 

TO  O 

• 

*  * 

Ph 

P  d 

rH 

cm  H  H 

♦*  i 

<  p 

g, 


w 

M 

r*. 

H 

CO 

CO 

3 

o 


w 


© 


©  © 
P  N 
P  P  • 
«H 


d  P 

DO  1Q0<O  'CO 

o  ©  d 

,  .  d  O  *H 

fc  ^  PiO-P 
0>  «M  O  d  d 

♦H  O  *H  >>  CL  © 
>  ^  P 

<«>>►• 
d  P  f 
©  *H  ■ 

C  ©  rO 

p  cd  Tf  d 
to  £  . 

•n  ©  r 

'OCR© 

O'  'ao  B  d 


9 

cd  o 
•H  O 
O  'p 


o 
m  o 


d 

•H  TJ 


«  w 
©  w 
d  © 

!  3  & 

a 1  o 
©  d 
d  CL 


d 

d  • 

© 

T? 
tO  O 

§?  6 

aJ  B  ©  • 

Scfi  Lt) 
o  d  Ph  © 

d  p  'nfl  P 

O  d 
d  *  O 
CL  (fl  CL 


o  ^ : 

©  *> 


S  *M 

CL  CO 

g  f 

d  fH  ‘QO 

’QflP  O  d 

o  d  cd 

O  ©  CL  rH 

O  *  . 

.O  P  *0  R  P  © 

O  ©  -H  ©  p  w 

Tj  to  n  tH  .H  -H 

cd  co  -h  cd  d 
-  >•  ©  10  o  © 

d  X  ©  p  to 

<<  >■  d  -H  ©  X3  © 

cd  P  J2  C  ^3 
<<  d’H  3  p 


•H  >>  d  d 


u 


1 


X 

•H 


to 

*r-4 


>. 

X 

•H 


cn 


1  I  -1 

N  X 

«  tn  R)  0) 

<U  ©  0)  *H  r-* 

N  N  fH  ** 


tr.  ho  <1 


•  ^  -*-> 
C  o 

H  C  ID 
£j  0)  -O 

P  »-*  O 


TH  * 

P  *n 
d  <d 

o  i-i 

X  -H 
<  TO 
CV»  CO 

P  OJ 

X  rH 
TO  O 


•  to 

CO 

ro 

•  6  © 

W 

W 

«  d  p 

N  O 

W 

©  ©  P  3 

P  ^ 

h. 

N  «  -qo 

• 

M 

x  3  *h  o  ©  p 

32 

co 

CO 

ft.  *\ 

co 

4J  P.OP 

o  p,m 

<d 

©  <m  O  P  P 

*. 

00  o 

3 

•H  O  fH  N  fX  © 

O 

>  X  p  £ 

d 

f. 

p 

©  >.  ►  -H  rH  3 

O 

H  •  OJ 

b 

P  4-3  rH  as  o 

kr-  no 

©  T?  ’H  tH  O 

<D 

<i  '■o  in 

O  <M  ©  X  O  Tl 

C/J  Oi 

•h  in 

rH  in 

W  CH  M.  C 

rH  ^  u 

lO  DrMH.H 

5C  rH 

O  XHJ 

UO  C  fi  4) 

1 

M  rH 

Oi  wi  g  f.  «  to 

•'N 

CO  p  JcJ 

fH  .H  O  <D  to 

>><o  m  w 

CO  O  q  U  0) 

p 

o  d 

C  4>  <D  h  *H  h 

O  4-* 

O  X 

■H  <r5  £  i>\  ^  VtO 

X  P 

a;  rH 

T)  (7  o 

d  o 

o  o 

P  h  cn  O  ID  h 

par*.  oo 

4)  o  d  R  h  P. 

O  © 

•  Q 

0^  '? 

X  u 

tflcfe 

d  Pa)* 

d 

S'  -H 

D.n  H  co  ^4  nr) 

*■3  .H 

<d  x 

P  fl>  W  o  h  Fh  a) 

d 

H  O  • 

o  p  h  -o  Vio  n 

0)00*0  <« 

h-h  ao  o  u 

O  *H 

O  © 

\ii)P  O  h  h  •  o 

e  0 

CO  rH 

o  u  d  a  <s  p- 

3  X 

T  •  03 

o  a>  p<rH  -h  a> 

d  o 

^■2  rt 

O  *r»  -H  X  h  h 

Tl  «D 

r*  P 

rP  ^3  rrj  g  ^  4) 

P  X 

^  P 

O  0)  -H  4)  P  00 

o 

S'  0)  rs 

T1  to  W  <H  .H  -rl 

m 

rH  00  • 

d  W  ^4  d  h 

ni  Q 

U  H  -P  Cvi 

•  >  ID  CO  O  4) 

d  S', 

[p  <d  P  o 

c  >>  a)  p  to 

M  d 

•It’lerill'O  4) 

d 

NX  O 

d  P  P  M  ^p 

25 

43  o  m 

5^  «tj  cPE-c  «  p 

to 

4> 

fH 

rH  • 

1  |  «rH  P 

P  T3 

-o  r.  o 

cd  a) 

copcodaj.HPa) 

a  *h 

P  Q)  <D  fH  rH  p  0>  *0 

N  N  H  -U  P  f-<  O 

P  -H 

o  to 

p  to  £  «  h  u  <;  K 

d  co 

P  cd 

• 

P  rH 

.  ■  .h  n 

M  O 
rP  E 

rH  0J  M  H  M 

<!  3 

rv 

•  W 

c n 

o 

•  6  4) 

M 

M 

to  d  P 

N  O 

M 

4)  0)  h  P 

b  r- 

r^. 

,P  N  w  >30  Fp  tlD 

*  ^  ’t 

H 

P  3  fH  O  4)  P 

32  J” 

00 

P  U  fH 

2  ^ 

c/1 

t  XJ  P.  O  P 

O  p,nn 

1)  cm  o  P  C 

^  CO  co 

•rH  OH  P.  4) 

Hd  >h  o 

>  A  -P  g 

d 

p 

4)  ^  H  H  3 

O  W  •  OJ 

b 

P  4  *  • — ido 

U  r>-  m 

(D  T?  *H  -H  O 

a)  <4  io  in 

O  <M  CD  rO  O  'TH 

P'—'CO  Q\ 

p  d  d  « 

fH  U")  r-t  in 

to  q  .H  P*  q 

^  *H  sz  o 

lO  4)  »H  CO  fH 

Shu 

CO  q  R  4> 

1  H  rH 

O*  >a0  0  P  «  oo 

r.n-  co  p 

r<H  o  ©  W 

xco  Pci  Ha  ao 

W  O  P  P  © 

p  n  d 

C  ©  ©  h  f  1  P 

OP  o  P 

•H  'q  P  ©  3  ^0 

■p  phh 

H  O’  O 

d  o  O  O 

p  p  n  o  ©  p 

P  P,fxH  CO 

©  o  d  e  P  p. 

o  a>  •  Q 

a<H  5 

,Q  C  Z 

d  R  ©  • 

d  S^*H 

P,  TO  p  ffl  ^  H 

O  rH  p 

3  ©  W  O  p  H  © 

d  J  P  • 

O  >  P  P  vaO  p 

a)  o  a<  o  w 

P  -H  >afl  O  P 

O  *H  r  1  0) 

tkOp  O  P  p  •  o 

C  Cto  1-1 

o  t.  d  P.  d  P. 

d  rP  ►  •  P 

O  ©  P.rH  .H  © 

C  o  tH  2  d 

O  •*">  fH  >i  P  P 

TJ  03  J>  P 

P  P  © 

h  P  <  c 

O  «  fH  ©  p  TO 

O  Z  0)  *S 

•XJ  C0  CO  «h  .H  *H 

J  rH  00  . 

d  TO  fH  d  P 

rH  Q  EJ  rH  p  OJ 

-  ►>  ©  TO  O  © 

«  g  E  <1  F.  O 

P  >>  ©  P  © 

rf 

^  p  fH  ©  T?  © 

rt  Xj3  O 

d  3d  dd 

S5  Xl  o  03 

5s  •«<  ctFh  d  p 

rH  • 

I  |  *H  *<2 

>.  X  P  O 
cnp«d©fHfl© 
ID  4)'Q 

N  *'  N  H  4->  P  r-H  O 
3  j  p  ©  -rH  O  rH  P 
fx  71  ;t;  fn  o  «*;  cP 


4>  -H 

o  w 

d  to 
P  ol 

4>  rH 
TO  O 

3S 


r 

• 

cn 

OO 

n 

•  0 

© 

W 

M 

«  « 

P 

N  O 

M 

©  ©  P 

3 

p  ^ 

r*. 

P  N  TO  'afl  rr5  tin 

* 

HI 

p  3  *H  O 

©  p 

2 

r  n 

CO 

P 

O  fH 

fx.  *\ 

ro 

^  P  P. 

o  p 

r>  txo 

< 

©  Cm  O 

p  p 

cn  u 

r-1 

•H  O  -H 

p.  © 

^  'H 

o 

P“  4^ 

d 

d 

\r* 

©  >>  ^  -H 

rH  3 

O 

W  "  CNJ 

b 

P  P  rH 

d  o 

t*,  r-  m 

©  Td  «H 

•H  o 

a> 

»£>  in 

O  «H  ©  P 

O  Tl 

p-~> 

C'1C> 

p  d  *0  d 

Kc 

fH  in 

rH  ir< 

w  q  »h 

ID  ©  rH 

TO  -rH 

;<hu  >,<c 

cO  C  R  © 

i 

H  rH 

OiW)B  P 

TO  TO 

CO  3  Zd 

1-4  fH  O 

©  TO 

>,'0  M  Hi  TO 

TO  OP 

P  4> 

P 

n  d 

P  ©  ©  u 

•H  P 

O  +> 

O  -p 

•H  Tl  P  O' 

3  VtO 

P  P 

tX  rH 

■tJ 

cd  o 

d  o  O  O 

P  p  TO  O 

©  p 

P  P.f».  c/1 

©  o  d  R 

p  a. 

o  © 

•  o 

G  <M  £ 

P  pto  cz 

d 

R  © 

• 

d 

7..H 

P.  TO  P 

d  XJ  TJ 

k-3  rH 

3  ©  W  o 

P  FH 

© 

d 

P  • 

o  ^  P  P 

tiO 

P 

©  O  IP  O  « 

p*h  tin 

o 

P 

C  -H 

O  © 

trip  o  p 

p  • 

C 

§5 

CO  rH 

o  P  d 

P.  d 

Cd 

-  •  rO 

O  ©  P.  rH 

•rH 

© 

P  O 

d 

O  -O  fH 

>>  P 

P 

TH  © 

3  +» 

dd  G 

P  © 

p  ^3 

3  c 

O  ©  .H 

©  P 

TO 

O 

^  ©  .S 

Tl  TO  TO 

cm  -H 

•H 

rH  TO  • 

d  TO  fH 
-  r  © 

d  P 

rH  O 

UH  pfvj 

w  a 

© 

d  ^ 

ffi  <<  u  o 

C  >»  ©  P 

<1  >  P  fH 

TO 

H  d 

©  Ti 

© 

d 

Xd  O 

d  3  A  P 

Xi 

>> 

TO 

+> 

•rH 

•H 

rH  • 

Tl 

1 

>. 

1  *H  *2  P 

P 

Tl 

x>  c  -■» 

3 

© 

TO 

P 

TO  d  ©  -H  c  © 

o 

fH 

© 

© 

©  -H  rH  X  ©  -Tl 

«M 

N 

Oh 

N  r4  P  P  r-l  O 

p 

•H 

3 

d 

3  ©  .H  O  r4  P 

o 

TO 

W-K 

CO 

£.ahu<;fd 

d 

TO 

P 

d 

• 

p 

rH 

. 

•  •  H  K 

TO 

X> 

O 

P 

■H 

M  H  H  M 

R 

CO 

o 

•  6 

© 

r-Q 

w 

cn  d 

P 

K) 

o 

H 

© 

©  P 

3 

p 

r- 

Fx* 

X 

N  TO  tlO 

T? 

*0 

• 

P=. 

H 

X 

3  fH  O 

© 

p 

rQ 

co 

CO 

«H  P 

O 

•H 

2 

•' 

CO 

k 

X  Cd 

o 

X 

O 

a,m 

© 

<m  O 

p 

p 

*s 

(.0 

'O 

3 

•H 

o  fH  N 

,  Cd 

© 

o 

p 

j> 

X  X 

<=; 

d 

£ 

© 

N  ►  fH 

rH 

3 

O 

■ 

(NJ 

P 

P 

X  X 

d 

o 

ft. 

ro 

©  T?  -H 

•H 

o 

© 

j 

O 

in 

o 

<H  ©  X 

O 

Tl 

P  ^ 

CO 

o» 

X 

d  tJ  d 

•H  in 

rH 

in 

to  q  -h 

n. 

P 

cS  '“l 

'z. 

u 

in 

©  rH 

TO 

fH 

rH 

u 

to 

PR© 

1 

H 

r— 

o> 

W)  B  d 

TO 

TO 

CO 

3 

rH 

*rt  O 

© 

TO 

w 

TO 

w  o  d 

P 

© 

P 

n 

d 

P 

©  ©  p 

*H 

P 

O  -p 

U 

X 

fH 

Tl  P  © 

3 

VtO 

4J  P 

CX 

rH 

T> 

cf 

o 

06  O 

o 

O 

X 

P  To  O 

© 

p 

P  P-fx. 

CO 

© 

ode 

P 

a 

o  © 

» 

o 

0 

«H  ^ 

rO  P 

71 

P 

5Z 

d 

0 

© 

• 

d 

52”. 

«rl 

Cd 

TO  C 

ffl 

X 

T3 

r-3  rH 

X 

3 

p  d  o 

P 

Eh 

© 

d 

►4 

p 

• 

r. 

>  P  X 

Vio 

X 

©  o 

Af 

0 

TO 

P 

•H  tic 

o 

P 

O  *H 

o 

© 

VM 

X  O  P 

p 

• 

o 

Q  *1 

CO 

rH 

o  p  d 

Cd 

cvJ 

Cd 

2  xi 

— 

• 

X 

O 

©  Cd  rH 

fH 

© 

c  o 

>- 

2 

d 

o 

-*~i  *H 

N 

P 

p 

-q  © 

X 

X 

X  T)  G 

X 

© 

P  p 

c 

O  ©  -R 

© 

X 

TO 

o 

© 

•v 

T3 

TO  TO 

cm 

•H 

♦rH 

rH 

TO 

• 

d 

TO  fH 

d 

P 

rH  Q 

&J 

rH 

X 

CVJ 

-  >  © 

TO 

O 

© 

d  ^ 

H 

<; 

P 

Q 

P 

N  ©  X 

TO 

> — - 

t-* 

d 

r  p  *H 

© 

T> 

© 

d 

NX 

O 

d  3 

X 

X 

ss 

X 

o 

CO 

rS  <;  o1  Eh 

3 

X 

/ 


L 


i 


SUPPLEMENTARY 


INFORMATION 


DEFENSE  DOCUMENTATION  CENTER 


NOTICES  OF  CHANGES  IN  CLASSIFICATION,  D  I  ST  U  I  B  U  T  10  N, 

AND  AVAILABILITY 


TAB  No.  69-22 


15  November  1969 


IDENTIFICATION 

FORMER  STATEMENT 

NEW  STATEMENT 

|  AUTHORITY 

IDENTIFICATION 

FORMER  STATEMENT 

NEW  STATEMENT 

AUTHORITY 

AD-823  002 

Naval  Ordnance  Lab. , 
White  Oak,  Md. 

Rept.  no.  NOLTR-67- 
115 

10  Jul  67 

No  Foreign  without 
approval  of  Naval 
Ordnance  Lab., 

Attn:  Code  730-3) 

White  Oak,  Md. 

No  limitation 

1 

USNOL  ltr, 

U  Sep  69 

